Hey guys. I'm looking to password protect SYSTEM CHANGES ONLY in Vista. Basically anything that would be done through the Control Panel I want passworded, but nothing else. It's a work computer that occasionally has others accessing it, so I can't password the account completely. Any thoughts.

I'm afraid it isn't quite that easy. I work in an office with mostly older employees who have zero computer skills. If there's any sort of password prompt when they need to access something on my machine (usually only about once per month), they're going to throw their arms up in the air and have a panic attack.

So ideally I'd like to somehow password protect any changes made from the control panel whilst maintaining an Admin account with no login password. Assuming that's possible.

Egglick wrote:Ryu, that program looks spectacular for universities, libraries, or anywhere there's a public computer. Unfortunately I'm not looking to spend money out of pocket for this.

Gotta pay to play, if you want it done right...

"No I don't want the Ask toolbar! No I don't want Bing as my default search! No I don't want to make Chrome my default browser!""Good grief, man! WHAT are you trying to install on that poor computer?""Antivirus."

You still always have the option of enabling various GPOs, but there are some odd 1500 of the things. It'll involve a bit of research to make sure you've found every possible option to disable.

Don't forget that as Admin your GPO changes could always be undone as well.

It is possible to have a Standard User run with UAC without being prompted for elevation (it's a GPO). Any such situation would result in an automatic failure to elevate. This too would prevent system level changes and the failure would be silent. That means things would work different than expected for your users though and you've already made them out to be somewhat frail.

"Welcome back my friends to the show that never ends. We're so glad you could attend. Come inside! Come inside!"

Egglick wrote:I'm afraid it isn't quite that easy. I work in an office with mostly older employees who have zero computer skills. If there's any sort of password prompt when they need to access something on my machine (usually only about once per month), they're going to throw their arms up in the air and have a panic attack.

So ideally I'd like to somehow password protect any changes made from the control panel whilst maintaining an Admin account with no login password. Assuming that's possible.